Trino requires access .security to read indices #18145
Unanswered
AJVelezRueda
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Hello! I am trying to connect Elasticsearch to Trino, in order to configure the access for Superset. I am currently using the following catalog properties file:
connector.name=elasticsearch elasticsearch.host=${ENV:ELASTICSEARCH_HOST} elasticsearch.port=9200 elasticsearch.auth.user=${ENV:ELASTICSEARCH_USER} elasticsearch.auth.password=${ENV:ELASTICSEARCH_PASS} elasticsearch.default-schema-name=default elasticsearch.security=password elasticsearch.tls.enabled=true elasticsearch.tls.truststore-path="my_path"
The user elasticsearch user I am currently using has the following cluster privileges:
And the following index privileges:
and this is applicable for the index patterns:
*
and.*
When trying to access the default schema Trino raises an error:
2023-07-05T18:09:38.445Z ERROR stage-scheduler io.trino.execution.StageStateMachine Stage 20230705_1876938_00045_cfad3.0 failed io.trino.spi.TrinoException: Error listing tables for catalog elasticsearch: method [GET], host [https://XXX.xXX.xxx:9200], URI [/.security/_mappings], status line [HTTP/1.1 403 Forbidden] Warnings: [[types removal] The parameter include_type_name should be explicitly specified in get mapping requests to prepare for 7.0. In 7.0 include_type_name will default to 'false', which means responses will omit the type name in mapping definitions.] {"error":{"root_cause":[{"type":"security_exception","reason":"action [indices:admin/mappings/get] is unauthorized for user [superset]"}],"type":"security_exception","reason":"action [indices:admin/mappings/get] is unauthorized for user [superset]"},"status":403}
I tried using the specific schema name for which I have access by doing:
elasticsearch.default-schema-name=my-index*
But I was still getting the same error. So, I was wondering if is there any way of connecting directly to an specific index, or with non-admin privilegies that I don't have.
Thank you in advance!
Beta Was this translation helpful? Give feedback.
All reactions